
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
File: JHvwudcpiha5hv1pVPCkRfLiEDw.mft (raw, json)
Hash identifier: Rxf5+DFR0XX0ALyuPQ+uxI4BVoyhtV49HzKSl1c5Vrw=
Subject key identifier: CC:00:C5:1D:4A:10:6D:13:3E:9F:33:99:2D:23:6F:73:34:CB:0D:B1
Authority key identifier: 24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
Certificate issuer: /CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Certificate serial: 0199FB458E89C6F5769D9AFF75924BE4C4CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 07:01:03 +0000
Manifest this update: Sun 19 Oct 2025 07:01:03 +0000
Manifest next update: Mon 20 Oct 2025 07:01:03 +0000
Files and hashes: 1: JHvwudcpiha5hv1pVPCkRfLiEDw.crl (hash: cwssodmQQ6GRIYXmRaqw2WdONzYOH6r5MY1tzSbQbNI=)
2: M1rH5imTv_z7sg0DBQQ2ZUDiOdE.roa (hash: Di3stSxtNFdk8NJg2rUPI7WyOatBqa+pZ2chuvZrKec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:8e:89:c6:f5:76:9d:9a:ff:75:92:4b:e4:c4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Validity
Not Before: Oct 19 07:01:03 2025 GMT
Not After : Oct 20 07:01:03 2025 GMT
Subject: CN=cc00c51d4a106d133e9f33992d236f7334cb0db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:77:3c:92:cc:ed:82:12:f4:c7:2e:98:20:ac:
e0:86:04:e0:cd:db:53:1f:ad:e2:a0:4f:05:3d:48:
4d:fb:24:e9:c2:6a:e4:f6:31:93:6e:c4:22:fd:4e:
6a:b5:2d:ba:cc:8b:b3:6c:56:6a:2e:4a:7a:c7:51:
77:74:8a:70:25:a6:3d:8e:c1:d0:38:9a:cf:c1:d6:
77:09:25:fc:a5:fd:f0:25:20:c2:07:e1:7d:1a:30:
73:b4:2a:e5:59:5a:52:ec:56:0a:9f:e3:f1:3e:33:
7f:6a:6a:e8:2c:a8:52:4a:40:30:00:9d:36:ef:7a:
a7:05:a4:60:d5:f2:9e:98:83:eb:b6:a4:7a:75:c4:
59:e0:ea:db:e7:fe:71:56:45:c9:d7:30:a3:df:88:
49:cf:ce:ae:3c:8e:32:3a:bb:28:18:3f:a2:9f:e0:
90:d0:29:96:18:4f:ad:a2:3b:3f:dc:53:80:e4:22:
86:93:82:35:f3:fc:8f:84:24:20:3e:0a:b0:bd:e6:
d0:a7:51:1c:dd:35:8e:f1:21:c3:09:1f:39:1d:bf:
b2:7f:fb:20:db:9b:c0:73:44:29:94:c5:2b:83:7f:
56:5c:78:44:d7:6e:83:64:e3:e5:ed:09:f4:2c:ca:
9f:99:f2:32:13:6b:94:42:78:32:41:d0:5e:ee:7f:
9b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:00:C5:1D:4A:10:6D:13:3E:9F:33:99:2D:23:6F:73:34:CB:0D:B1
X509v3 Authority Key Identifier:
keyid:24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4a:3c:88:de:b4:59:b5:49:ee:97:eb:ab:64:47:ce:64:a5:
f5:ad:b4:be:f4:8e:20:15:eb:50:54:35:28:8c:ad:49:84:a4:
c1:2e:96:bc:2b:2c:12:5f:58:4d:3b:ab:76:0e:41:da:45:c1:
94:1a:5b:88:64:1b:7c:c8:ac:97:51:4a:25:71:fe:c5:8b:74:
42:30:68:9d:5c:8e:65:f5:83:67:9d:c4:50:c4:51:15:90:a3:
e6:c0:4b:ca:3b:de:57:34:0e:a9:1c:d0:32:e9:b0:12:6e:c0:
02:02:a0:e4:44:48:9d:f5:5c:66:88:6e:23:50:7a:82:93:4a:
37:ef:a6:a5:91:b5:2b:c4:f1:9b:29:32:d8:d2:03:c3:a0:d3:
06:f2:fd:ba:55:bb:48:c8:ca:51:7d:b5:d5:47:5a:cb:3c:46:
7a:0e:f5:eb:ff:a3:10:67:49:dc:9e:06:e6:d0:d9:56:1c:09:
09:67:5d:09:f3:8d:6d:07:33:81:12:72:39:13:19:78:a7:45:
45:0c:92:e0:8c:89:2e:85:e4:ba:3b:83:79:9d:9f:55:f5:11:
94:a4:53:01:c9:15:6f:20:9c:83:59:51:42:a5:68:f6:3b:a4:
ac:46:1b:cc:19:54:07:61:2b:f4:16:e7:73:f6:1d:67:7f:42:
f3:e2:fd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:10 2025 by rpki-client